Data Protection Officer/Senior Legal Officer

Data Protection Officer/Senior Legal Officer

Your Day-to-Day:

• Define and oversee the organisation’s personal data protection strategy, ensuring compliance with GDPR requirements and applicable local regulations.
• Maintain and update internal data protection policies, procedures, privacy notices and related documentation.
• Manage and monitor the processing activities register, ensuring its accuracy and completeness.
• Conduct or supervise Data Protection Impact Assessments (DPIAs) and identify potential risks associated with personal data processing.
• Recommend appropriate corrective measures and advise business and IT teams on privacy-by-design and privacy-by-default principles.
• Oversee requests from individuals exercising their data protection rights, including access, rectification, erasure and objection.
• Develop and deliver internal training sessions and awareness initiatives to promote data protection best practices.
• Supervise internal GDPR compliance audits and monitor the implementation of technical and organisational measures.
• Prepare regular data protection compliance reports for senior management.
• Act as the main point of contact for data protection authorities and contribute to the review and drafting of third-party contractual clauses, including Data Processing Agreements (DPAs) and Standard Contractual Clauses (SCCs).
• Conduct legal research and provide comprehensive legal advice to various business functions and senior management.
• Draft, review and negotiate a wide range of legal agreements, including client contracts, outsourcing agreements and intra-group contracts.
• Manage legal disputes in coordination with external legal counsel.
• Provide support and cover for the General Counsel when required.

Your Profile:

• Hold a Master’s degree in Law.
• Have significant professional experience as a Data Protection Officer or in a comparable data protection role, ideally within the banking, financial services or investment sector.
• Possess a recognised Data Protection Officer certification; this is considered an advantage.
• Hold the Luxembourg Certificate of Complementary Studies in Law (CCDL); this is an advantage.
• Demonstrate in-depth knowledge of the GDPR and related data protection legislation.
• Have a strong understanding of financial law, commercial law, corporate law and/or civil law, including inheritance and succession matters.
• Be fluent in both French and English, with excellent written and verbal communication skills.
• Have knowledge of Dutch; this is considered an advantage.
• Demonstrate strong analytical, research and legal drafting skills, with excellent attention to detail.
• Be able to work independently while collaborating effectively with multidisciplinary teams.
• Be highly organised, rigorous and capable of handling complex legal and regulatory matters.
• Have excellent proficiency in Microsoft Office applications.